Data Protection — News

IE 9 anti-malware kingpin in browser face off

By Liam Tung | 18 July, 2011 09:44

Microsoft’s Internet Explorer 9 is hands-down superior at detecting security threats delivered by malicious websites, according to testing company NSS Labs.

100 Romanians nabbed in global fraud bust

By Liam Tung | 18 July, 2011 08:50

Romanian law enforcement on Friday arrested more than 100 people alleged to be involved in a multi-million dollar US-Romanian fraud network.

Quintet nations agree on cybercrime action plan

By Stilgherrian | 17 July, 2011 17:24

The Council of Europe Convention on Cybercrime is further entrenched as the key international legal instrument for tackling online crime following the third annual Quintet meeting of Attorneys-General in Sydney this week.

Do we value convenience over security?

By David Daw | 16 July, 2011 06:46

Many users continue to make unsafe transactions over the web -- even if they're aware of the danger of such transactions, a new survey from Symantec suggests.

Apple releases iOS updates to fix PDF vulnerabilities

By Serenity Caldwell | 16 July, 2011 04:07

After last week's report from the German government regarding PDF-related security vulnerabilities in MobileSafari, Apple has stepped up: The company on Friday released updates for all iOS devices that fix the problem. The updates are recommended for all users of Apple's mobile devices.

10 technologies that will change the world in the next 10 years

By Julie Bort | 16 July, 2011 03:45

As computational power rises exponentially, not linearly, so does the rate of change - and that means the next 10 years should pack in far more technological change than the last 10.

US military learning cybersecurity lessons from businesses

By Tim Greene | 16 July, 2011 03:45

In its new cyberdefense strategy, the Pentagon is drawing on lessons about agility, lifecycle management and supply-chain protection that have already been learned by private corporations.

Google building Postini features into Apps

By Juan Carlos Perez | 16 July, 2011 02:35

Google has started to move e-mail security features from its Postini service directly into its Google Apps collaboration and communication suite.

24,000 Pentagon Files Stolen in Major Cyberattack

By Sarah Jacobsson Purewal | 16 July, 2011 00:30

The Department of Defense says it was hit by a cyberattack by a "foreign intelligence service" that managed to pilfer 24,000 sensitive files.The attack, which occurred in March, was perpetrated by an unnamed "nation state," according to Deputy Defense Secretary William J. Lynn III. Lynn who disclosed the breach during a speech Thursday outlining the Pentagon's new cyber strategy for dealing with cyber-breaches.

US, Romanian authorities target Internet fraud scheme

By Grant Gross | 16 July, 2011 02:14

Romanian law enforcement officials on Thursday executed 117 searches targeting more than 100 people in an ongoing effort with the U.S. Department of Justice to break up a large Internet auction fraud scheme, the DOJ said.

Researchers finds dangerous vulnerability in Skype

By Jeremy Kirk | 15 July, 2011 23:20

A security consultant has notified Skype of a cross-site scripting flaw that could be used to change the password on someone's account, according to details posted online.

Banking Trojan hits Android phones

By Brad Reed | 15 July, 2011 04:27

A banking Trojan that has plagued Symbian, BlackBerry and Windows Phone users has now made its way to Android devices.

Optimizing Managed File Transfer (MFT): Dos and don'ts

By Neil Roiter | 15 July, 2011 04:23

Discourage data leaks, standardize and optimize file transfer--that's the ambition of Managed File Transfer (MFT) products. Here, experts offer practical advice on using these tools.

Automating and securing file transfers: key issues

By Neil Roiter | 15 July, 2011 04:09

Data in transit. Those three words are at the heart of business in the 21st century and the rise the of the secure managed file transfer (MFT) industry. Companies function by sending, receiving and sharing information, often in very large files, and often in huge numbers of files in batch transactions. Files have to move quickly, reliably and securely.

Sony Executive: PSN Hack Was a Great Learning Experience

By Brennon Slattery | 15 July, 2011 03:58

Sony's president of network entertainment must look at the world through rose-colored glasses because he describes the hacking that took down the PlayStation Network as "a great learning experience."

Jay Leno is top spam scam lure, security company finds

By John E Dunn | 15 July, 2011 03:40

US talkshow host Jay Leno, singer Madonna, actress Cameron Diaz and President Barack Obama share an unpleasant secret their publicists are powerless to do anything about.

US hails progress with Russia on cybersecurity cooperation

By Jeremy Kirk | 15 July, 2011 02:51

Russia and the U.S. are working to reduce chances for a cybersecurity incident that could damage the countries' relationship, according to the top cybersecurity adviser to U.S. President Barack Obama.

Three men sentenced for £4 million phishing rampage

By John E Dunn | 15 July, 2011 00:08

Three men behind in a phishing gang police believe stole over £4 million ($6.3 million) from credit cards and online bank accounts in the UK and Ireland have been sentenced to a total of 13.5 years in jail.

Hacktivism moves from pranks to problems

By Robert Lemos | 15 July, 2011 00:06

Agricultural technology firm Monsanto became the latest target of hacktivists this week, when hackers donning the mantle of the distributed protest group Anonymous claimed that it had penetrated the firm's network and leaked personal information on 2,500 of the company's employees.

Most users run insecure versions of Adobe Reader

By John E Dunn | 15 July, 2011 00:04

Most users of Adobe's hugely popular PDF Reader are content to use out-of-date and potentially insecure versions of the program, an analysis by antivirus company Avast Software has revealed.

CSO Corporate Partners
  • Webroot
  • Trend Micro
  • NetIQ
rhs_login_lockGet exclusive access to CSO, invitation only events, reports & analysis.
CSO Directory

Splunk for Security

Use Splunk to search, alert and report in real time on any user, network, system or application activity, configuration changes, and other IT data from one place.

Security Awareness Tip

Incident handling is a vast topic, but here are a few tips for you to consider in your incident response. I hope you never have to use them, but the odds are at some point you will and I hope being ready saves you pain (or your job!).


  1. Have an incident response plan.

  2. Pre-define your incident response team 

  3. Define your approach: watch and learn or contain and recover.

  4. Pre-distribute call cards.

  5. Forensic and incident response data capture.

  6. Get your users on-side.

  7. Know how to report crimes and engage law enforcement. 

  8. Practice makes perfect.

For the full breakdown on this article

Security ABC Guides

Warning: Tips for secure mobile holiday shopping

I’m dating myself, but I remember when holiday shopping involved pouring through ads in the Sunday paper, placing actual phone calls from tethered land lines to research product stock and availability, and actually driving places to pick things up. Now, holiday shoppers can do all of that from a smartphone or tablet in a few seconds, but there are some security pitfalls to be aware of.